RE: Firewall positioning in Large Network

  Generally, a firewall is a policy enforcement device, and so
what policy you're enforcing will dictate placement.

  The vast majority of firewalls are designed to provide border 
gateways between networks with different policies, so knowing
where your gateways/routers are placed will offer a strong clue 
to where the firewall(s) will be most effective.

David Gillett


> -----Original Message-----
> From: listbounce@securityfocus.com 
> [mailto:listbounce@securityfocus.com] On Behalf Of Mubin Shaikh
> Sent: Wednesday, June 20, 2007 4:34 AM
> To: security-basics@securityfocus.com
> Subject: Firewall positioning in Large Network
>
> Hi,
>
> Question - 
>
> What is the best logical placement for firewall in large network?
>
> If I have 3000+ user organisation with both core and access 
> switch available, will i connect my firewall to core switch 
> or access switch ? and why ?
>
> Thanks
> -Mubin
>
>
>       
> ______________________________________________________________
> ______________________
> Fussy? Opinionated? Impossible to please? Perfect.  Join 
> Yahoo!'s user panel and lay it on us. 
> http://surveylink.yahoo.com/gmrs/yahoo_panel_invite.asp?a=7